Many security analysts struggle with the number of incidents they have to handle and how that can be done in an efficient and timely manner. In this course, Incident Management with TheHive, you’ll cover how to utilize TheHive to respond to various incidents in an enterprise environment. First, you’ll demonstrate how incidents can be recorded and managed in TheHive. Next, you’ll operate the advanced features, like creating cases, adding observables, tasks, review alerts, and get an overview of the various fields that cases have and how to work with them. Finally, you’ll analyze how reporting works and how appropriate dashboards can be created to provide in depth operational visibility. When you’re finished with this course, you’ll have the skills and knowledge to record cases and perform security investigations in TheHive.
Author Name: Nick Mitropoulos
Author Description:
Nick is the CEO of Scarlet Dragonfly and has numerous years of experience in security training, cyber security, incident handling, vulnerability management, security operations, threat intelligence and data loss prevention. He is a certified ISC2 & EC-Council instructor, a GIAC advisory board member, an EC-Council global CISO member, a CEH Hall of Fame holder, a senior IEEE member and has an MSc in Advanced Security and Digital Forensics from Edinburgh Napier University.